Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
File:                     kzJxEXB2iVD92fne_mUfLVoTEr4.mft (raw, json)
Hash identifier:          cwsrxpVBodQ5jNHqBbVoU8yI7Ar4+n6D8Xv5FlnpHwE=
Subject key identifier:   C9:2C:71:50:F2:99:F5:EE:4E:A1:F9:F1:5F:49:40:1A:E5:AC:0E:94
Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
Certificate issuer:       /CN=9332711170768950fdd9f9defe651f2d5a1312be
Certificate serial:       018F8748D210617416AEF0A1B1632C0D11E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
Manifest number:          0577
Signing time:             Fri 17 May 2024 16:00:47 +0000
Manifest this update:     Fri 17 May 2024 16:00:47 +0000
Manifest next update:     Sat 18 May 2024 16:00:47 +0000
Files and hashes:         1: TP0TzZDlkPPtqRoQMJxU_vRM1zY.roa (hash: 57pAG+P47+URS/QwHQq0gNyhTnT0E/lfhtlZkixhM2U=)
                          2: kzJxEXB2iVD92fne_mUfLVoTEr4.crl (hash: EHQAbrPtZbAdJFgjujvYZhgu/ZdPeeb5q8VQ7t91qOI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:d2:10:61:74:16:ae:f0:a1:b1:63:2c:0d:11:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be
        Validity
            Not Before: May 17 16:00:47 2024 GMT
            Not After : May 18 16:00:47 2024 GMT
        Subject: CN=c92c7150f299f5ee4ea1f9f15f49401ae5ac0e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:41:67:43:97:11:14:b4:d3:a4:65:d2:b8:e9:
                    4b:d8:f5:97:a3:43:ef:75:b2:b3:46:53:45:fc:3e:
                    0c:b2:69:45:c3:87:3d:ed:5a:32:2f:2d:7c:d0:bc:
                    bd:c5:15:d7:84:c5:ee:c2:5a:13:d8:c1:72:01:11:
                    c3:05:a3:fe:42:06:dd:c6:e4:3b:bb:3a:a3:f4:3b:
                    c7:fa:20:a3:75:0c:c0:07:79:5e:ee:d6:98:3e:24:
                    d4:bc:41:97:91:e9:dd:ef:0b:6a:6e:83:7c:99:8a:
                    7b:ee:cc:2b:42:76:a8:b4:7b:04:b3:3a:29:b8:36:
                    b2:17:cc:06:28:05:aa:ec:5c:f4:3a:90:d2:5f:27:
                    30:18:f4:42:6a:e8:0d:9e:60:b8:08:ee:71:28:57:
                    2a:7d:af:1c:fb:8c:97:a0:95:f6:c7:5f:bf:82:a9:
                    fa:bd:dd:23:0a:d1:33:f9:cf:53:49:97:93:73:b5:
                    b1:b9:83:d5:46:b1:ee:5d:4f:ed:a9:ce:ae:c1:e9:
                    b5:86:90:27:c9:ab:67:de:aa:ed:f5:82:87:62:85:
                    56:5e:9d:16:89:7b:9f:dc:2c:e5:ea:2e:10:ca:0e:
                    3e:8b:b4:89:fa:64:64:01:66:f2:1b:a5:8a:49:3b:
                    fd:df:52:e3:a4:a4:49:61:5e:57:a3:a7:28:c3:ff:
                    71:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2C:71:50:F2:99:F5:EE:4E:A1:F9:F1:5F:49:40:1A:E5:AC:0E:94
            X509v3 Authority Key Identifier:
                keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:5f:15:b4:c3:e5:20:72:4c:3d:b9:4e:49:0e:ee:cd:bf:9a:
         f5:b5:77:80:09:da:2c:9e:d3:d6:83:26:4f:cd:d6:04:6b:ea:
         75:02:3e:91:03:02:8c:33:00:d5:51:2e:c4:57:67:10:68:13:
         f2:d8:27:96:64:9f:1f:69:eb:65:da:39:b1:67:0d:7a:a7:8e:
         96:83:8e:2c:89:3b:ca:b6:18:67:85:51:42:88:ac:54:d5:fc:
         09:78:5c:d8:4e:09:f1:25:1f:7b:31:23:ab:9f:1b:64:ed:b7:
         19:7f:10:af:fc:8f:e3:e7:b1:45:f5:ee:ee:66:23:aa:25:24:
         3b:7d:35:54:df:09:fd:9b:e7:68:b1:ac:70:5c:ca:f5:73:22:
         dc:3c:c6:8e:5d:9a:07:b8:0c:81:a1:2d:5a:5e:52:26:09:10:
         a0:9c:28:fe:fe:97:6e:43:bd:28:42:a4:63:43:8d:3f:7f:73:
         4a:1f:03:b7:42:16:a4:ab:c1:66:e5:1d:d1:81:a8:13:f0:d0:
         d2:4c:ff:0a:58:cc:97:70:5c:d5:aa:28:6e:24:a8:fa:e6:f2:
         cf:0e:93:eb:f1:12:0c:6c:a0:21:3a:db:36:06:d7:bb:96:04:
         a1:99:6b:a5:eb:8f:fd:0d:f4:61:06:e2:a2:48:26:31:dd:93:
         ce:63:15:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:56:11 2024 by rpki-client on console-ams.rpki-client.org